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[Claim I ]A method wherein if is the method ot proudmg cop\ protection seiuee on a 
stoiage medium, and data on a storage medium is erkipliet cd In a ke\ dependmg on a 
position of data in a memotv module and daU is wintcn in a position on a stota^t- medium 
selected at random b\ each wntmj: operation. 

[Claim 2 j \ method according io claim ! w herein data is arranged at a bhvk w hkh has a 
sectot numbct and a secoi nutnhu of the prudent or the following block is t hosen ?tom a nee 
block list at landom during oath bloek wining. 

[Claim 3 jk'Uum i vibea-in data >>n a stoiaye meduim t\ at tanked at a bhxk and a hhvk is 
enupheted b\ one oi a ke> depending on a position of a bh>ek be\ond it, oi a method given 
m two. 

[k laim 4[ \ method ateindmg to eknm \ wherun a block ts cncipheied b> a ke> depending 
un d position of said block 

[Clatm metnod aei.oiding io ekum k w herein ,i block is cnetpheted ny a key depending 
on a position oi a block vustun in kfoie 

[k knm o| \ niefhod acceding to claim wheiem a block ts enupheted bs a kc\ depending 
on a position of till tht blocks 

j Claam " j \ method according to claim 1 v\ herein ,i storage medium is an exchangeable solid 
memory module. 

it. hum 8 j \ ss sk'to ananged in otdoi to perfoim a method avoiding io claim 1 of having a 
i.OiUiol deuce which chooses a position at tandem 

[Claim v ijPiavKkk equipment which icproduces data trom a storage medium which has the 
data pteparcd in aceotdaiiue vuth a method actOidmg to ckurn 1. 

[( kttm U)] \ data accumulation medium prepared in aecoidanee with a method according to 
Jami I of ha\ mg a conttol desire winch choose a position at random. 
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{ Detailed Desenpu.m ol the Inwrnumi 
fOOOl] 

1 ins invention relates to a solid memoi\ module to a data accumulation medium, especially 
tonot'tmne the met i tod of pfosfdinc. cops ptou\ uon f'tohahh with the technology which 
piVL*ies<-v.s, neu-yeneiatton portable audio feptodectton and recording equspincnt are based 
on so' td teehnoiogv \n aduintageoui? argument t» based on consideration of weight, electric 
power, and a shock -puvl 

i or example a H'ttwaie Dtmider like a music pubbshei is apkmg lot i means foi 
inconsenieiue not to complete!} or complete!} Iv given to an authon/ui use- and to oppose 
the u>p\ to wht».h the mfoimation acaimnkUcd in digital ojk ls not permuted \ method and 
the swem mu^t support the audition be fine a untai and purchase, and a business model like 
the eontiolied cop% (foi example ^tpetdtMiibuiJoii) \ specific proNeni k uu^ed b\ the 
equipment avoiding to the pioteetion standard which can access as! the infotm.thon on o 
storage medium potent!, !K 
1<XK»3| 

1 he onK ulenufieatnui tod<. (i!>) "was engiaseci" in the stotage mulumi ts used tor the 
solution ol a known opposite cop\ Sins is disadvantageous because oi the consociation of 
pmacx m a eettam tunc ! he method foi which it niamK depends on such ID docs not 
piO\fdv.- mutable inoictttoii agaun.t the cop} cuchme -a>lo known as 'a lepuxkkJion an.itk" 
so that u rna\ e\pkun Mow 

\imm\ 

So the purpose ot tiii^ m\ cntioi) is to pun ide the method and s\ stern v\ hich do not need to 
use eoiujMiatisels mesxtensise onh ID which icquncs onh moderate pf<\xv;mg and which 
pun ide the p>otei lion espectalK to a repioduclion attack. 
joHilSl 

I sing tnc ke\ which depends foi the fundamental idea of this copx protection method and a 
swem on die position in winch data is su-ied deieiinmtMicaiK. data is enciphered and it 
lOmbnus \s Jtn the method which data makes impossible j p;edie!mg wheu on a medium / it 
]-■ aciualh accumukned j 1 he.cioie, a coin oi dcta breaks change whith cannot predict an 
accumulation position 1 1, and a relation decline [ between the I.Wei and a olographic key 
| b\ tins So d a L,ode pteparation method is strong ^trough and a undom number generator 
is siunii! enough m deception and ail the seciets aie fulh hidden once data is moved, it is 
never unrecovera hie . 
j0006'J 

1 MeteSoa- the purpose ol this imeutton to to piov ide how the tclahon between a 
crsptogtaphie kev and ai accumulation position is disturkd b\ cop\ opt. tat ton inexpensive 
foi storing diiia oil a stoia^c mcdiisiii m oilier things. 



[0007] 

bspeaally this invention is suitable tor the solid memory module which can carry out random 
access m every position m a memory simply based on other substance like the sector of the 
uniform size relevant to the access width of a bit. a byte, or the target memory. 
[0008] 

So, according to one feature oi' this invention the data on a storage medium.. It. is enciphered 
by the key K depending on the position { !..!. I.?, I.. ■) of the data on a storage medium, and data 
is written in the position on the storage medium selected a? random bv each writing operation. 
10009] 

This invention relates also to the record carrier prepared by the playback equipment and the 
method according to claim 1 for reproducing the record prepared by the system arranged so 
that it may perform by the method according to claim ! . and the method according to claim !. 
The further dominance feature of this invention ts indicated to the independent claim, 
[00 10] 

These and other purposes of this invention will become clear with reference to the following 

embodiments. 

[001.1] 

Dl^y;nsi..i.is a figure accompanied by the exchangeable module C conveyed between two the 
playback equipment A and B and playback equipment showing two national playback 
equipment arrangement. Both playback equipment has the suitable method of inserting a 
module so that it may illustrate. In the following explanation, this exchangeable module 
presupposes that it can access by other means (ior example, reading machine of a PC base). 
Though this does not allow the copy in which the playback equipment A and B is not 
accepted, it raises a risk of a copy of the data on a module not being accepted. A suitable 
embodiment can be used still more widely according to this invention, although it explains in 
relation to solid audio (solid state) playback equipment. 
[0012] 

It is expected that solid audio (SSAt playback equipment will be a new standard of a portable 
audio playback unit within several years. This is mainly because it is dominance about 
weight, size, used power, and .shocking-proof nature to a present disk or tape. The SSA 
playback equipment which can be used now combines the Hash memory of 32 to 64 MB and 
the MPFG1 layer ill (MP3). or audio compression technology like A AC, m order to realize 
music reproduction time of CI.) (**} quality by 1 hour. However, the music industry requires 
the feature of suitable copyright protection by the ease of the copy relevant to the digital 
character of these pieces of equipment. 
[0013] 

One too! of the copy protection of digital contents is encryption. Although a code docs not 
prevent an illegal copy in itself, since it can take out original content only by decoding using 
a suitable key, it cannot use such a copy and carries out it. As a result reproduction of 
contents is restricted to the equipment which can access such a key. An illegal copy is 
prevented it is simultaneously just, there is no inconvenience in use of the contents planned 
and it is the purpose of a copy protection system So manage a key. 
[00.14] 

The memory of most about solid multimedia accumulation application has a big flash 
memory and a controller on a substrate. The controller does not need it) be, even if 
accumulated, and two os move another memories may be provided on the module The 
examples of such a multimedia memory module are a memory stick ( Sony). SmartMedia 
(SSFDC forum association}, CompactFlash, (registered trademark) (PCMCIA forum), and a 
miiltiinediacard (MMC association). These pieces of equipment is considered as the same 
blocking device as a hard disk drive thai memory access generates by carrying out an address 



•v\ nh me v\"or (i>pkaii> 1 .2 b\io>> on u module fo be sure, die \ I \ interlace skmdaid of 
i onnet ung .1 haul disk and othes penpheia! equipment io I'C adopted as some of abo\o- 
mennoned modules ! his makes it possible fo use IV and fo rejnoduoe the content;! ol such a 
metnon modme s'mpK <e\en bfO Akb<>titm orhej modules h.neap mteiiace tot eseluMxe 
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The memory of most about solid multimedia accumulation application has a big flash 
memory and a controller on a substrate. The controller does not need it) be, even if 
accumulated, and two os move another memories may be provided on the module The 
examples of such a multimedia memory module are a memory stick ( Sony). SmartMedia 
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miiltiinediacard (MMC association). These pieces of equipment is considered as the same 
blocking device as a hard disk drive thai memory access generates by carrying out an address 



with the sector {typically 512 bytes) on a module. To be sun.-, the A t A interface standard of 
conjiecting a hard disk and other peripheral equipment to K.' is adopted as some of above- 
mentioned modules. This makes it possible to use PC and to reproduce the contents of such a 
memory module simply (every bit). Although other modules have an imcrtace for exclusive 
use and instruction set, they art- bused on die block. Thai is. the address of each sector on a 
module is carried out. and if may be changed 
i'0015] 

helosv a demountable memory module is used for SSA playback equipment (refer to drawing 
1) - others (it is {for example, like the read-out machine based on PC?)} - it. is accessible by a 
means. 

10016] 

Fundamentally, two approaches exist in copy protection. The I st is connecting an audio to 
specific playback equipment by supplying die only secret number used as a key for 
encryption oi an audio to the playback equipment of each each. So. the audio accumulated on 
the memory with one playback equipment is reproduced only with the playback equipment. 
When one person has two or more SSA playback equipment, of course, it is embarrassed 
dramatically. To be renewable irrespective of the SSA equipment which uses the music 
accumulated on the memory module for downloading to the module is demanded. A user can 
eopv audio contents to other modules, and it must he avoided that it is renew able from both. 
j'0017] 

Although one know ft solution can be read from application, it is embedding the only 
identification code (ID) which cannot be changed at a memory module. This identification 
code is used for generating a cryptographic key peculiar to a module. 

Although other known solutions are inexpensive, they are using the defect in a memory 

module automatically generated as a result of the manufacturing process used lor 

manufacturing the memory of high accumulation capacity. The position of these natural 

defects is only to each module probable. 

And it works as a "fingerprint" of the equipment. 

Again, the only key peculiar to a module is generated. 

[0019] 

Tlie.se known solutions need the only identification code, and do not provide protection 
against a reproduction attack. 'A reproduction attack' is the form of a copy that the copy 
which is not observed mother systems (system 2) from one system {system 1) is made. 
The copy on the system {however., it is unreprodtieible) 2 which is not accepted may be used 
for recovering the refreshable copy on a system repeatedly even in even after the original 
copy's being invalidated. 

Drawing 2 explains this in detail. To the system 1, each system ha? the only identification 
code with which it is expressed by ID! and expressed by ID.? to the system 2. and includes 
the file in which contents were accumulated as a sequence of another block. In this example, 
the data about the right of an original copy and use is enciphered by the key obtained from 
ID! and secret S. In 'a front [ purchase I audition' or a rental business model, after the time 
period when access of data is still mote specific, or the number ol t imes of use is refused. The 
data copy (the 2nd step of drawing 2 ) to the system which has the only identification code 
ID2 does not turn into a copy which can be used. It is because an identification code is not in 
agreement with ID I I lowever. this copy is completely the same as that of an original copy 
i every bit). It can reverse-copy to the system i from the system 2 at any time, and the copy of 
this copy can be used. "S he customer with this inaccurate makes it possible to hold the copy 
which can be re-copied on the system 1 repeatedly, and can be used on the system 2, 
Therefore, after obtaining contents by ''audition before purchase", an inaccurate customer 



copies data to the system 2 from the system L and in order to maintain "an audition", he re- 
copies to the system 1 from the system 2 repeatedly "An audition before purchase" turns into 
"an infinite audition." Similarly, this mechanism make* payment once to a rental, and. may be 
used tor copying eternally. 
[0020] 

In order to use a storage device effectively, it is required to use a file system. Through a tile 
system, art user datum is systematized and is accessed. In order to treat a memory module as 
a blocking device, generation and management of the file system are left behind to 
application, in the PC environment, the operating system has already had an embedded file 
system support, and this is logical selection. By supporting an ATA standard, this support can 
be used without change io a memory module. However, In independent equipment like SSA 
playback equipment, when a memory module adopts the approach of a blocking device, the 
application needs to perform the details of a file system. So, if the controller unit on a 
memory module treats the details of a file system, the independent (carrying) application 
which needs accumulation of multimedia contents will be created still more efficient! v 
[0021] 

Drawing 3 shows the schematic view of bnibodimeni 20 of a memory module. Since it is 
easy, the electromechanical interface to playback equipment is not shown in a figure. The 
storage region 30 has the access time which became independent substantially in the physical 
accumulation position. The controller 22 controls access to the memory itself. The host 
interlace 24. the memory interface 2b. and various subsystems like the file system 28 are also 
shown. The externa! writing and internal selection to a memory are also shown. In application 
programming interface AH, it should have the following functions. To the format of a 
memory, the arbitrary volume numbers of the random number generated whenever it is 
immobilization or hard wire or a command is executed by only are otaputteci. This number is 
changed only when a formal instruction is executed, and -hereby, ail the data on equipment is 
lost. The copy protection itself docs not -need this number. In order to generate a file and to 
rt-fer to the target file behind, reusable tile ID is generated. When writing m a block, the 
sector number chosen from a free block list at random is generated. The sector number 
generated depending on use is a actual sector number by which the data itself was stored 
during writing operation, or is a sector number accumulated during the next wr iting 
operation Among other things, since a flash memory is not barred by seek time which is 
common to the system based on a disk, the considerable solid audio equipment of time which 
is not in a loss is possible for it. Such random selection helps to equalize the consumption 
covering the whole element further. Application is thrown away using the sector number 
returned by the demanded block write instruction. When reading a block. Hie ID controls the 
output of the sector number of a block oi the data itself, the present, or the next that should be 
read. 
[00221 

Drawing 4 shows the example of the file structure distributed by the block which has the size 
of 5 1 2 bytes of single sector T he 1st block holds the information about a tile and others have 
the file data itself. Above-mentioned composition blocks creation of the copy for every 
modular bit, unless the means of change is formed to each sector. The copy to the mid- 
position and the re-copy (above-mentioned "reproduction attack" is constituted) which the 
data on a module follows copy data to a thoroughly different position. This provides a certain 
protection against a copy. Copy protection is performed by enciphering a data block as a 
secret further by the key obtained also from the position (for example, preferably sector 
number) in which the data in question is stored. The information on a position is acquired 
from the block write-in function to return the sector number of the following file sector. Since 
it cannot use to the 1st block, this information may be used to data with low sensitivity, fhis 



restriction is conquerable by making the sector number of the 1st sector in the ilk in winch 
the data (for example, file information) itself is written return to a tile generating function. 
Before reading actual data about read-out, the sector number of the present or the next can be 
used and application makes it possible to calculate an exactly good suitable decode key for It 
to solve and be alike. A cryptographic key is combined with the position of accumulation in 
this way. and it makes it impossible for the method of performing it to predict this position. A 
copy changes an accumulation position and, as a result, breaks the relation between a position 
and a decode key. The secret used by derivation of a key is cautious of it being shared 
between the secret between ail the playback equipment on the whole, or a person skilled in 
the art occurring bv other known methods 
£0023] 

Drawing 5 A and 5B show the method according to this invention, it writes in the position as 
which the controller 22 was chosen at random in data whenever the data biock was written in. 
In 5B, the position is indicated to be drawing 5 A by f..;, l.j. etc Data is enciphered by the 
key depending on the combination of the secret S, position f f , or position L, {for example., the 
block written in or a pre- block or written in and positions, such as a pre- block}. 
[0024] 

It is a method which cannot reproduce the position of data and. as for creation (refer to 
drawing 5 8), the copy of the data of a memory module is changed. This actually occurs 
twice. Therefore, the re-copy of a copy has data which does not correspond to the argument 
which needs positions (!..;", (..>", etc. ) foi the suitable decipherment of data A tier that, the 
copy of a copy is not decoded and cannot be used, " A reproduction attack" is prevented. 
|(K)25] 

Drawing 6 A and 6B show the embodiment of this invention, and are all the data {a single 
key.), or it consists of a block of a key -- it is enciphered by the key K. and itself is 
enciphered and accumulated by key K' which is an output of the hash function which has 
position I..:, i.?. etc. and the secret S as an argument. Thus, K' is dependent on the 
sequence of the whole by which a data block is written in the position of a data block in this 
ease Since position l.. f , !..;, and L -.. are changed for every writing access by the method which 
cannot be predicted, thereby, key Is.' is changed with the result of hash function H. contents 
are copied, and since key K' is changed by the method which cannot be predicted when re- 
copied and. playback equipment goes wrong at recovery of a key (the method indicated to be 
drawing 5 A to 5B - like). Therefore, any reproduction attacks go wrong. Thus, a copy is 
prevented by the comparatively inexpensive method which does not need to use only ID 
which requires only moderate processing This invention is cautious of providing the 
possibility of copy protection which does not need to use only ID. The exclusion of this does 
not carry out use of such a code for other Reasons or the purpose of the further protection. 
The group of a block is able to be written | to arrange data in the group of a block, and } in a 
random position. It can be used to the group of a biock instead of the same mechanism as 
having mentioned above being a single block. The "random position" within the concept of 
this invention is a large meaning, and means the position which can be beforehand predicted 
becau.se of { no ] the just purposes, "for all the just purposes", it is because a certain kind of 
algorithm is used and a random number or use of a position is obtained. It is preferred also 
about the consumption on an element to distribute equally through randomness, i.e.. a 
memory module, truly substantially. Although it is preferred all or that a method is 
substantrilK applied io ;Jl data fhi\ m\ cm ion dlso includes the embodiment by which, a 
method is applied only to some data in a memory module. This is dominance from the field 
of working speed, for example. The number of this inventions is one, and they are not limited 
to use of only one encryption method. When data is divided into a group, a different 
encryption method and a different method for which said encryption method depends on a 



position i.an u^e n tot a diiierem gsoup '1 his decreases the danger 01 a decipherment winch is 
no} accepted thr tonuojici mm as wham ;i random position ss chosen ahlnfugh the tomrojtei 
is toimed m me s\>tem apart bom the memotv module - a mcmotv module - being 
aeeumuicted is pieiefTci tUeteh\ , n becomes dttiiaslt to >o,oid a method ot to je^mhje 
selection ot th<. p"»rtn>n oS data and 10 have, influence 
|0026| 

ii i<- lilt: method of providing cop\ protection on u t stojagv medium and tbe position id whah 
me data auariged at the block k stored is chosen at mndom b> a umtfoilei (preferahlv 
mdustoni. and i<- pretened I nf Unrigs | I he ei\ptogKiplnc ke\ lot winch it depends <m the 
position ol lhe- dau in a borage medium JtamaueaHs is used, and the deemhetment of the 
copied data is made impossible m piaettee 
jBnei fK'st npfion of the Diavungsj 
IDrawfoa 11 

ft is a tignie showing iwo notional plavhaLk equipment ammgement 
[Drawing 2] 

b is a figure show nig the mechanism ol 'a icproduction attack' (ifeomcnnotui reehnulog) 
drawing 31 

If is is figure showing tbe block of the outline of the embodiment of' a storage medium 
1 Drawing 41 

b is a figure show nig iht- example of a file structure 
| Drawing 5 AJ 

ff is a figute show nig how the example ot the method aceoidine to this invention and this 
method pi event "a icproJueiion attack " 
S Drawing 5 B'j 

b ts a figute showing how the example oi the method at cording- to this (mention and thfo 
method ptevem "a rqnoduetmn attael 
{ Drawing 6 A j 

it ts a figure showing the tinthcr cxampk ot ilu method ueeoiding to this invention 
{ Drawing o B j 

H ts a figure showing tbe turther example ot the meinod according to ibis invention 
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* NOTICES * 

Jj?Q and TNPIT are not responsible for any 
damages caused i>y the use. of this translation. 

1 .This document has been translated by computer. So the translation may not reflect She 

original precisely, 

2.**** shows the word which can not be translated. 

3. In the drawings, any words are not translated. 
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